SCCM windows update key in registry will not written

Question

Hi @ all,

we have a SCCM single Primary Site. A Software Update Policy Configuration (Client Settings, Software Update Group etc.) is in place, but on some clients are downloading their updates from the internet. Also updates for driver, firmware etc. We want to control the software updates fully with SCCM. After some troubleshooting, I found out, that the WindowsUpdate hove under HKLM.../Policy/../WindowsUpdate will not be written by the SCCM Agent.

Any tipps?

Thanks in advance.

Tom

Answer 1

Hi @Thomas Baumann - zbits GmbH, 

but on some clients are downloading their updates from the internet. 

1, There are also have some clients can get updates from SCCM, right? Are they all in the same collection?

2, These clients that cannot get updates from SCCM, can they get other content from SCCM?

3, Please select a problematic client and check the local policy to see if any policies control it.

Looking forward to your reply.

Best regards,
Cherry

Answer 2

Hi @Thomas Baumann - zbits GmbH, 

1, How many MP you are using?

2, These clients are located on the intranet and internet, right? How about the MP?

3, According to the logs your provided, this client cannot locate the MP and cannot connect the server EU2MECMSUB.WESTEUROPE.CLOUDAPP.AZURE.COM. Can client ping the server FQDN? And can server ping the client?

Please help confirm that they are also get the related certificate.

4, Please help upload Configuration Manager Properties screenshot from this client for our reference, the screenshot for your reference:

Looking forward to your reply.

Best regards,
Cherry